9 days ago
Base Salary
$190k - $228k/yr
Responsibilities
- Design, build, test, maintain, and tune high-fidelity SIEM detection logic while mapping detections to MITRE ATT&CK.
- Architect and implement SOAR playbooks to reduce Mean Time to Respond.
- Develop Python scripts, security tools, and REST API integrations connecting security tools and data sources.
- Implement infrastructure and configuration as code for automated deployments and consistency.
- Build LLM-based workflows, prompt-engineering pipelines, and agentic workflows to analyze, summarize, and contextualize security alerts.
- Serve as a senior escalation point during security incidents and guide containment, eradication, and recovery.
- Monitor and secure AWS and on-premises workloads across various operating systems.
- Conduct post-incident reviews and create automated preventions and detections.
Requirements
- 8+ years of dedicated experience in Information Security, Security Operations, or DevSecOps engineering roles.
- Deep hands-on experience with Splunk or ElasticSIEM for log analysis and detection creation.
- Strong proficiency in Python and experience building security tools, scripts, and API-driven automation pipelines.
- Experience designing and maintaining automated playbooks in a modern SOAR platform such as Cortex XSOAR or Tines.
- Practical experience or advanced personal projects using LLM APIs such as OpenAI, Anthropic, or AWS Bedrock for security-log or triage workflows.
- Solid understanding of AWS security services including GuardDuty, CloudTrail, IAM, and VPC Flow Logs.
- Strong familiarity with incident-response lifecycles including NIST SP 800-61 and SANS PICERL.
- Incident Commander or Incident Handler experience is strongly desired.
- Preferred certifications include CISSP, GCIA, GCIH, or AWS Certified Security - Specialty.
- Experience with infrastructure-as-code tools such as Terraform is a bonus.
- Contributions to the open-source security community, including tools or Sigma rules, are a bonus.
About Zoox
Zoox is transforming mobility-as-a-service by developing a fully autonomous, purpose-built fleet designed for AI to drive and humans to enjoy.